PT-2026-30459 · Tenda · Ch22

Ltzhuster · Published 2026-04-05 · Updated 2026-04-05 · CVE-2026-5604

Mitre

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2026-5604

Affected Products

Ch22

References · 7

• 🔥 https://github.com/Litengzheng/vuldb_new/blob/main/CH22/vul_52/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5604 · Security Note
• https://vuldb.com/submit/785032 · Note
• https://vuldb.com/vuln/355396 · Note
• https://vuldb.com/vuln/355396/cti · Note
• https://twitter.com/vuldb/status/2040804176767410199 · Twitter Post
• https://tenda.com.cn · Note